CISM Certification Exam Questions with AI Explanations

QUESTION: 331

An information security manager is preparing a presentation to obtain support for a security initiative. Which of the following would be the BEST way to obtain management’s commitment for the initiative?

Include historical data of reported incidents
Provide the estimated return on investment
Provide an analysis of current risk exposures
Include industry benchmarking comparisons

Answer(s): C

Reveal Solution Next Question

QUESTION: 332

Which of the following is the MOST significant security risk in IT asset management?

IT assets may be used by staff for private purposes
Unregistered IT assets may not be supported
Unregistered IT assets may not be included in security documentation
Unregistered IT assets may not be configured properly

Answer(s): A

Reveal Solution Next Question

QUESTION: 333

Which of the following is the MOST effective method of preventing deliberate internal security breaches?

Screening prospective employees
Well-designed firewall system
Well-designed intrusion detection system (IDS)
Biometric security access control

Answer(s): B

Reference:

https://www.techrepublic.com/article/strategies-for-preventing-internal-security-breaches-in-a-growing-business/

Reveal Solution Next Question

QUESTION: 334

A business previously accepted the risk associated with a zero-day vulnerability. The same vulnerability was recently exploited in a high-profile attack on another organization in the same industry. Which of the following should be the information security manager’s FIRST course of action?

Reassess the risk in terms of likelihood and impact
Develop best and worst case scenarios
Report the breach of the other organization to senior management
Evaluate the cost of remediating the vulnerability

Answer(s): A

Reveal Solution Next Question

QUESTION: 335

To effectively manage an organization’s information security risk, it is MOST important to:

periodically identify and correct new systems vulnerabilities
assign risk management responsibility to end users
benchmark risk scenarios against peer organizations
establish and communicate risk tolerance

Answer(s): A

Reveal Solution Next Question

ISACA Certified Information Security Manager CISM Dumps in PDF

Free ISACA CISM Real Questions (page: 67)

QUESTION: 331

QUESTION: 332

QUESTION: 333

Reference:

QUESTION: 334

QUESTION: 335